1. 1 NRC 's Quarterly Business Seminar Introducing “BIZ Corner” NRC 's Quarterly Business Seminar Introducing “BIZ Corner” Hosted by: The Small Business Program

2. 2 Seminar Agenda Introduction Agency Mission, Goals and Objectives Small Business Program  Tools, Services and Opportunities Contracts Program Overview Program Office Presentation – Computer Security Office Legal Perspective Tips “BIZ Corner”

3. 33 To license and regulate the nation’s civilian use of byproduct, source and special nuclear materials to ensure adequate protection of public health and safety, promote the common defense and security, and protect the environment. Our Mission

4. 44 Who We Are The Energy Reorganization Act of 1974 established the independent U.S. NRC to regulate commercial uses of nuclear material Other duties of the former Atomic Energy Commission were assigned to Department of Energy

5. 55 Safety: Ensure the protection of public health and safety and the environment Security: Ensure the secure use and management of radioactive material NRC Mission Goals

6. 66 Nuclear reactors - commercial power reactors, research and test reactors, new reactor designs Nuclear materials - nuclear reactor fuel, radioactive materials for medical, industrial and academic use Nuclear waste - transportation, storage and disposal of nuclear material and waste, decommissioning of nuclear facilities Nuclear security – physical security of nuclear facilities and materials from sabotage or attacks NRC Regulates

7. 77 Establish rules and regulations Issue licenses Provide oversight through inspection, enforcement and evaluation of operational experience Conduct research to provide support for regulatory decisions Respond to emergencies NRC Primary Functions

8. 88 Major Program Offices Office of Nuclear Reactor Regulation Office of New Reactors Office of Nuclear Material Safety and Safeguards Office of Nuclear Regulatory Research Office of Nuclear Security & Incident Response Office of Federal and State Materials and Environmental Management Programs

9. 99 Major Program Offices Office of Investigations Office of International Programs Computer Security Office Office of the Chief Financial Officer Office of Information Services Office of Human Resources

10. 10 NRC Profile NRC Budget  $1.07 billion for FY 2010  $1.05 billion for FY 2011  $1.05 billion for FY 2012 NRC Headquarters, Rockville, MD Over 4,000 employees; almost 3,000 at HQ Region I - King of Prussia, Pennsylvania Region II - Atlanta, Georgia Region III - Lisle, Illinois Region IV - Arlington, Texas

11. 11 What NRC Buys Information technology, products, services and solutions Administrative support Engineering support Technical research & assistance Construction Auditing & financial management Training

12. 12 What Other Agencies Buy on Behalf of the NRC Research and development in the physical, engineering, and life sciences Leasing EEO investigative support services IT support services Administrative support services Research and laboratory support services

13. What Other Agencies Buy on Behalf of the NRC Payroll and contractor payment support services Acquisition and contract management support services NOTE: In accordance with FAR 4.606(b), interagency agreements may be reported to the Federal Procurement Data System-Next Generation (FPDS-NG); however, agencies who procure on behalf of the NRC may recognize the funding agency in such reporting. In FY 2010, approximately $65 million dollars of NRC funded acquisitions were awarded by other agencies through interagency agreements. 13

14. 14 Acquisition/Small Business FY 2008: U.S. Small Business Administration (SBA) “Green” or excellent ratings of NRC Small Business Procurement Scorecard Plans and performance – more than $169M FY 2009: SBA “B” rating - more than $225M funded FY 2010: more than $257M funded

15. 15 Small Business Goals & Accomplishments

16. 16 Laws, Executive Orders and Implementing Regulations Small Business Act, as amended Small Business Jobs Act of 2010 Executive Orders FAR Part 19 NRC Supplemental Acquisition Regulations Management Directives

17. 17 Small Businesses Are Important! Presidential Proclamation, 5/20/2010, declared small business serve as the engine of this great country’s prosperity and are a proud reflection of our character Critical to the economic well-being of our communities and to the security of the Nation

18. 18 Creates virtually all of the net new jobs added to the economy Provides 67 % of workers with their first jobs Employs 53% of the private work force Accounts for 51% of private sector output Accounts for 47% of all sales in the country Small Businesses Are Important!

19. 19 Small Businesses Are Important! Produces 40% of the gross national products Represents 96% of all U.S. exporters Invents more than half the Nation’s technological innovation, while accounting for 28% of jobs in high technology sectors Are critical to the Nation’s supplier base, flexible and competitive Dedicate senior management to contract support and performance

20. 20 Small Business Program Our Role Our Customers Portfolio of Programs Tools & Services

21. 21 Small Business Program: Our Role Conducts acquisition and data oversight; recommends acquisition and small business prime and subcontract goals and strategies, recommends set-asides and sources; counsels and trains agency contract and program officials; and supports agency market research efforts Engages in outreach and communications in support of congressional, Federal, State and local governments and private business organizations Delivers training, counseling and technical assistance to the business community

22. 22 Small Business Program: Our Customers “Other than Small Businesses” or Large Businesses, Non-Profits, and Universities Trade Associations, Chambers of Commerce, and other private organizations Congress Federal agencies, State, local, and county governments

23. 23 Portfolio of Small Business Programs 8(a) Sole Source & Competitive Service-Disabled Veteran-Owned Sole Source & Set-Aside HUBZone Sole source & Set-Aside Veteran Small Business Support Woman-Owned Small Business Set-Aside Total Small Business Set-Aside Partial Small Business Set-Aside Subcontracting Programs and Plans

24. 24 Small Business Program: Tools & Services Market research and capability reviews Acquisition strategy assistance Counseling, assistance and outreach SB Federal, Congressional, local government, and business sponsored Procurement Fairs –Liaison between agency officials and business community

25. 25 Small Business Program: Tools & Services Represents agency to other Federal agencies, Congress, Federal task forces and on other matters Annual Forecast of NRC Contracting Opportunities: http://www.nrc.gov/about- nrc/contracting/forecast.html http://www.nrc.gov/about- nrc/contracting/forecast.html Quarterly Business Seminar & “BIZ Corner” NRC Website: http://www.nrc.govhttp://www.nrc.gov Negotiates Socioeconomic Goals with SBA: www.sba.gov www.sba.gov

26. 26 NRC’s Public Webpage Click here Click Here

27. 27 Small Business Webpage Click here Click Here

28. 28 Forecast of Contract Opportunities

29. 29 Forecast of Contract Opportunities Part I

30. 30 Forecast of Contract Opportunities Part II

31. 31 Forecast of Contract Opportunities Part III

32. 32 Office of Administration (ADM) Division of Contracts (DC) DC’s Role DC Organization Applicable Regulations, Policies and Procedures Used by DC How DC Procures Supplies and Services and Manages its Grants and Agreements

33. DC’s Role Develop and implement NRC acquisition policies and procedures Direct and coordinate acquisition and financial assistance activities Provide advice and assistance to NRC program officials Provide oversight for NRC’s regional procurement activities Develop and administer overall agency guidance for contracting activities with the U.S. Department of Energy (DOE) laboratories and other agencies Provide oversight to ensure that appropriate procedures are followed in placing and monitoring DOE laboratory agreements and agreements with other agencies Oversee acquisition training, certification and career development programs Oversee the NRC SmartPay2 Purchase Card Program Develop policy and procedures and oversee NRC practices to ensure compliance with OMB Circular A-76 and the FAIR Act 33

34. DC Organization DC is a Division in ADM (see org chart at http://www.nrc.gov/about- nrc/organization/admfuncdesc.html)http://www.nrc.gov/about- nrc/organization/admfuncdesc.html DC personnel are Contracting Officers and Contract Specialists that manage NRC acquisitions of supplies and services as well as NRC grants; also have Procurement Analysts that manage NRC Acquisition Regulation (NRCAR) and supplemental policies and procedures DC Branches –Information, Management and Technology (IMT) Branch –Research, Resources and Grants (RRG) Branch –Materials, Security and Administration (MSA) Branch –Reactors, Safety and Licensing (RSA) Branch 34

35. 35

36. Applicable Regulations, Policies and Procedures used by DC Federal Acquisition Regulation (FAR) (48 CFR Chapter 1) (www.acquisition.gov/far)www.acquisition.gov/far NRC Acquisition Regulation (NRCAR) (48 CFR Chapter 20) (http://www.nrc.gov/about-nrc/contracting/48cfr-ch20.html)http://www.nrc.gov/about-nrc/contracting/48cfr-ch20.html Volume 11 of NRC Management Directives (http://www.nrc.gov/reading-rm/doc- collections/management-directives/volumes/vol-11.html)http://www.nrc.gov/reading-rm/doc- collections/management-directives/volumes/vol-11.html Internal Policies and Procedures 2 CFR 215: Uniform Administrative Requirements for Grants and Agreements with Institutions of Higher Education, Hospitals, and Other Non-Profit Organizations (OMB Circular A–110) 36

37. How DC Procures Supplies and Services and Manages its Financial Assistance Program Open Market –Up to $25k: http://www.nrc.gov/about-nrc/contracting/general/notice.html and, for EIT products and maintenance renewals, www.fedbid.comhttp://www.nrc.gov/about-nrc/contracting/general/notice.htmlwww.fedbid.com –Over $25k: www.fbo.gov and, for EIT products and maintenance renewals, www.fedbid.comwww.fbo.gov www.fedbid.com –Statutory exceptions (e.g., 8(a) sole source, SDVOSB sole source) GSA Federal Supply Schedules (GSA e-BUY at https://www.ebuy.gsa.gov/advgsa/advantage/ebuy/start_page.do or by contacting GSA FSS contractors directly) https://www.ebuy.gsa.gov/advgsa/advantage/ebuy/start_page.do NASA Solutions for Enterprise-Wide Procurement (SEWP) IV Governmentwide Acquisition Contract (GWAC) Grants and Agreements (2 CFR 215): http://www.nrc.gov/about-nrc/grants.htmlhttp://www.nrc.gov/about-nrc/grants.html 37

38. 38 Questions?

39. 39 Program Office Presents: The Computer Security Office Our Role Our Organization

40. 40 Patrick D. Howard, Chief Information Security Officer March 3, 2011

41. 41  Mission: Provide a robust cyber security program for the protection of NRC cyber assets in support of the agency mission  Vision: To lead the federal government in cyber security excellence

42. 42 Computer Security Office Patrick D. Howard Director/ Chief Information Security Officer Policy, Standards and Training Team Kathy Lyons-Burke Team Leader FISMA Compliance and Oversight Team Paul Ricketts Team Leader Cyber Situational Awareness, Analysis and Response Team Thorne Graham Team Leader

43. 43  Develops, coordinates and maintains the NRC IT Security Program policy  Communicates IT security policies, directives and requirements to NRC staff  Manages computer security awareness, training, and education program

44. 44  Reviews system certification packages and makes recommendations to the DAA  Tracks and provides oversight and support for the C&A efforts across NRC  Reviews and approves security documentation.  Tracks POA&Ms for quality of content and practicality and timeliness of remediation  Ensures that NRC computer security activities comply with FISMA and OMB guidance

45. 45  Receives, monitors, and reports computer security incidents  Monitors vulnerabilities, maintains awareness of the threat to NRC IT assets, and disseminates information regarding threats and vulnerabilities  Monitors intrusion detection/prevention systems  Interfaces with OIS/ICOD on prioritizing implementation of security patches  Communicates security alerts, software vulnerability reports, vendor patch notifications, and virus alerts  Evaluates and recommends IT security tools and security best practices  Conducts penetration testing and vulnerability scanning

46. 46  Reduce risks to NRC cyber assets  Responsiveness in the interpretation and application of security policy and guidance  Clear and frequent communication of the IT Security Program implementation status and policies  Involvement early in the system development life cycle to assist in defining business requirements for security

47.  QUESTION: What are typical IT security services NRC procures?  ANSWER:  Security Documentation Development/Update (SSP, RA, POA&M)  Security Test & Evaluation (ST&E)  System Contingency Plan Development/Update/Testing  Vulnerability Scanning  Continuous Monitoring Activities  Process/Procedure Development  IV&V 47

48.  QUESTION: What basic trends do you see in the types of IT security services the agency acquires?  ANSWER: Reduced costs resulting from mature methodologies, repeatable processes, and availability of automated tools 48

49.  QUESTION: What is NRC’s forecast for R&D, IT & Cybersecurity or Professional Services?  ANSWER:  Will continue to have needs for NIST-based IT security needs for system-level security  Anticipate continuing needs for IT security related process improvement support  Expect needs for enterprise risk management support in response to NIST SP 800-39 49

50.  QUESTION: What major acquisitions are on the horizon?  ANSWER:  CISSS Re-Compete (FY11)  SITSOSS Re-Compete (FY12) 50

51.  QUESTION: Are you having difficulty finding small businesses to compete for a specific acquisition or contract?  ANSWER: The NRC Computer Security Office currently has a competent stable of small businesses on which it relies 51

52.  QUESTION: Who are NRC’s major prime contractors for IT security and are there subcontracting opportunities?  ANSWER:  MAR, Inc. (CISSS)  Knowledge Consulting Group (SITSOSS) 52

53.  QUESTION: Can you provide examples of small businesses that are prime contractors?  ANSWER: All NRC IT security prime contractors are small businesses. 53

54. ? ? ? 54

55. 55 The Office of General Counsel Presents: Legal Perspective

56. 56 Office of General Counsel Contracting and Small Business Update Special NRC Contract Provisions/Clauses Conflict of Interest (COI) NRC Acquisition Regulation 2052.2009-570 www.nrc.gov/about-nrc/contracting/48cfr- ch20.html -Same technical area -Same or similar matter -Potential bias Legal Update

57. 57 Small Business Program Tips

58. 58 Tips On Conducting Business Know your own market, your customers and their needs! Develop an appropriate marketing plan and strategy to accomplish business objectives Develop appropriate tools to implement strategy (register with databases, develop good capability statements) Know the rules (e.g., Federal Acquisition Regulations (FAR) and NRC Acquisition Regulations)

59. 59 Tips On Conducting Business Know your niche and company strengths –Debriefs, win or lose Focus on past performance, target similar agencies Know your customer’s agency forecast Work with the Small Business, Project, and Contracts Offices Don’t discount subcontracting or simplified acquisition options

60. 60 Tips On Conducting Business Present a professional image : –Capability statements & brochures –Company Website –Past performance is key Maximize use of Federal programs: –Get on GSA’s Federal Supply Schedule, GWAC’s –Get certified! –Register on FBO

61. 61 Tips On Conducting Business Know potential conflict of interests issues Participate in outreach activities and Market! Market! Market!

62. 62 Quarterly Business Seminar & “BIZ Corner”

63. 63 Respond to market research and demonstrate interest, potential capacity and capability. Market Research & Market Surveys

64. 64 Key Sources of Assistance NRC Small Business Program and Division of Contracts Small Business Administration –Small Business Development Centers –SCORE: www.score.orgwww.score.org –Women’s Business Centers: www.womenbiz.gov www.womenbiz.gov –Center for Veterans Enterprise: www.vetbiz.gov

65. 65 Key Sources of Assistance Procurement Technical Assistance Programs –MD PTAP: www.mdptap.umd.eduwww.mdptap.umd.edu –VA PTAP: www.vaptap.orgwww.vaptap.org Other agency Small Business Offices: www.osdbu.gov www.osdbu.gov Minority Business Development Agency: www.mbda.gov www.mbda.gov State and local Government resources Chambers of Commerce

66. 66 Outreach Events for FY 2011 December 13, 2010 - Contract Connections at FDA, White Oak, Silver Spring, MD: hweschke@choosemaryland.org hweschke@choosemaryland.org February 28, 2011 - National Business Promotions & Conference Inc. Breakfast, Fairfax, VA: http://www.nbpci.com/ http://www.nbpci.com/ March 2, 2011- Women Impacting Public Policy Celebratory Luncheon, Washington, DC: http://www.wipp.org/events/event_details.asp?id=1 45375 http://www.wipp.org/events/event_details.asp?id=1 45375

67. 67 Outreach Events for FY 2011 March 8 -10, 2011 NRC Regulatory Information Conference, Rockville, MD: www.nrc.govwww.nrc.gov March 16, 2011- Minority Enterprise Executive Council Award, Washington, DC: www.meecouncil.com www.meecouncil.com March 24, - Veterans Institute for Procurement, National Program, Potomac, MD: www.mccc.md.com www.mccc.md.com

68. Outreach Events for FY 2011 April 1, 2011 - American Small Business Coalition Government Contracting Event, Chevy Chase, MD: http://www.theasbc.org/events/event_details.asp ?id=145767 http://www.theasbc.org/events/event_details.asp ?id=145767 April 7, 2011 - Northern Virginia Technology Council (NVTC) Event, Herndon, VA: http://www.nvtc.org/events/geteventinfo.php?eve nt=ECEVT-7 http://www.nvtc.org/events/geteventinfo.php?eve nt=ECEVT-7 68

69. 69 Outreach Events for FY 2011 May 4, 2011 - Congressional Procurement Conference & Expo, Rockville, MD: www.mcccmd.com www.mcccmd.com April 21, 2011 - 21 st Annual OSDBU Conference, Chantilly, VA: http://www.fbcinc.com/osdbu/ http://www.fbcinc.com/osdbu/

70. 70 Regulatory Information Conference

71. 71 Contact Information: NRC’s Small Business Program: (800) 903-SBCR(7227) smallbusiness@nrc.gov NRC’s Division of Contracts (301 ) 492-3600

72. 72 Questions?

73. BIZ Corner 73 BIZ Corner